Featured

Leading intellectual property firm, Marks and Clerk France is now able to advise clients in the implementation of open source programs, and enable them to achieve OpenChain ISO/ IEC 5230 standard.

To facilitate this advancement, Marks and Clerk France, is pleased to announce a partnership with the OpenChain Project, able to assess and advise on open source program to OpenChain ISO/ IEC 5230 standard.    

Open Source Software is becoming increasingly common in software projects of all types, bringing with it both exciting opportunities but legal risks. ISO 5230 OpenChain has been developed to allow companies of all sizes, and from all sectors, to adopt the key requirements of a quality open source compliance program, and effectively manage potential  risks. Marks and Clerk France offers considerable expertise and experience to support clients to strengthen existing processes, and build a standard compliant process from the ground up.

Enrico Priori, Managing Partner of Marks and Clerk France stated, “We are pleased to announce that Marks and Clerk France has been selected as the first OpenChain Acredited Partner in France. This partnership demonstrates the deep expertise and experience of Marks and Clerk France’s Software Licensing practice to support our clients in adopting high-quality open source compliance programs. As a firm, we are hugely committed to the strengths of the Open Source movement, and are excited to work with our clients to help them fully benefit from – and contribute to – this brave new world.”

“OpenChain ISO 5230 provides a compelling solution to quality open source compliance,” says Shane Coughlan, OpenChain General Manager. “OpenChain offers the freedom of choice for companies to conform via self-certification, independent assessment, or third party certification and we are delighted to name Marks and Clerk France as our first partner in the country.” 

About Marks and Clerk France

Marks & Clerk is the largest firm of intellectual property advisers in the UK and is recognised as one of the world’s leading IP firms.  Its patent and trade mark attorneys offer a full range of intellectual property services – covering patents, trade marks, designs and copyright – for clients ranging from SMEs and spinouts to universities and multinationals. 

Marks and Clerk France was founded in 2005 as a spin-out of the in-house Intellectual Property Law department of a major French Aerospace and Defense Group. These in-house origins have left the firm with an exceptional grasp of the needs and priorities of their clients, which has been further reinforced over the intervening years by the arrival of other professionals with a similar industrial background. This in turn has led to the accumulation of a unique expertise in the management of the risks and opportunities associated with the use of Open Source material in a commercial context.

For more information contact Mark Bell mark.bell@fr.marks-clerk.com

or visit https://www.marks-clerk.com/expertise/open-source-third-party-code/

About OpenChain

The OpenChain Project maintains the International Standard for open source license compliance. This allows companies of all sizes and in all sectors to adopt the key requirements of a quality open source compliance program. This is an open standard and all parties are welcome to engage with our community, to share their knowledge, and to contribute to the future of our standard.

About The Linux Foundation

The Linux Foundation is the organization of choice for the world’s top developers and companies to build ecosystems that accelerate open technology development and industry adoption. Together with the worldwide open source community, it is solving the hardest technology problems by creating the largest shared technology investment in history. Founded in 2000, The Linux Foundation today provides tools, training and events to scale any open source project, which together deliver an economic impact not achievable by any one company. More information can be found at www.linuxfoundation.org.

The Linux Foundation has registered trademarks and uses trademarks. For a list of trademarks of The Linux Foundation, please see our trademark usage page: https://www.linuxfoundation.org/trademark-usage.

Linux is a registered trademark of Linus Torvalds.

“It is with great pleasure that we welcome Chris and the rest of the team at Fieldfisher to the OpenChain Partner ecosystem,” says Shane Coughlan, OpenChain General Manager. “The availability of legal support is a vital part of ensuring an effective, efficient supply chain, and in the context of process management it can dramatically reduce uncertainty when rolling out an OpenChain ISO/IEC 5230 conformant program.”

“I am delighted to be working with OpenChain and, in doing so, supporting our clients to achieve better governance when it comes to open technologies,” says Chris Eastham, Partner, Fieldfisher.

About Fieldfisher

Fieldfisher is an exciting, forward-thinking organisation with key sector specialisms in technology, financial services, energy and natural resources, and life sciences.

In 2019, Fieldfisher was awarded a 5 star ranking for client service by The Legal 500. It was one of only five firms in the top 25 list of UK-headquartered firms to receive 5 stars based on client feedback. In 2021, our Technology and Privacy practices were top ranked as Tier 1 and Band 1 in the Legal 500 and Chambers rankings respectively, recognised as one of Europe’s leading law firms in these practices.

We regularly support the world’s biggest organisations and some of the most exciting growth companies. Our clients trust us with work that can have a huge impact on their business or organisation. 

We are a law firm built around people with all their diversity, and we strike a healthy balance between legal excellence and a down-to-earth practical approach to our clients’ needs. 

OpenChain ISO/IEC 5230:2020 has a positive and active relationship with the security sector. Onward Security is our latest official partner and will bolster this part of our ecosystem support.

“Most IoT devices are developed with open source software, and the lack of security by design during product development and the integration of vulnerable third-party OSS into IoT devices are potentially fatal problems. Onward Security is pleased to partner with OpenChain to assist with ISO/IEC 5230 compliance assessment by offering HERCULES SecSAM, a Security Assessment Management platform, as well as security compliance services,” said Morgan Hung, General Manager of Onward Security.

“The OpenChain Project released a Security Assurance Reference Guide in August to address market demand. While our ISO/IEC standard is focused on open source license compliance, the inflection points it identifies are equally application to successful security process management,” says Shane Coughlan, OpenChain General Manager. “Our new relationship with Onward Security is another part of the larger picture to ensure every company, in every sector, of every size can get the information and support they need to excel.”

About Onward Security

Onward Security is a leading brand in cybersecurity compliance solutions for the Internet of Things. It has been selected as Best Cybersecurity Company – Asia Gold Winner by Cyber Security Excellence Awards. In addition to possessing an international IoT cybersecurity testing lab, it develops automated security assessment products with AI and machine learning features. It has been dedicating to helping customers in IoT/IIoT equipment manufacturing, finance, telecom, and other industries for fast obtaining security certification and effectively managing risks and vulnerabilities of open source software to ensure cyber and product security.

The Institute of Software of the Chinese Academy of Sciences (ISCAS) joins the OpenChain Partner Program as the second official OpenChain Third Party Certifier in China. This dramatically expands the services available to companies of all sizes in the region and beyond.

“China is the single most important market in the global supply chain, and we are proud to start the year with a significant announcement underlying our progress in this region,” says Shane Coughlan, OpenChain General Manager. “Two key goals for China will be continuing to grow our local community of user companies, and continuing to ensure that the infrastructure to support their work continually improves. ISCAS is a partner we are delighted to work with in this regard.”

About ISCAS

Founded on March 1, 1985, the Institute of Software of the Chinese Academy of Sciences (hereinafter ISCAS) is a comprehensive research institute dedicated to the research and development of computer science theory and high and new technology of software.

ISCAS has computer science, computer software, computer application technology, and information security as the key disciplines. The discipline directions are computer science and software theory, basic software technology and systems, theories, methods and technologies of Internet information processing, and comprehensive information system technology.

ISCAS has actively participated in local and international exchanges and cooperation, established extensive scientific and technological exchanges and cooperation with many domestic provinces and cities, and more than 40 countries and regions such as the United States, Europe, Japan and Australia, and established branches in Guangzhou, Guiyang, Qingdao, Nanjing and other places.

Chinese Information Processing Society of China, the Algorithm Professional Committee of Chinese Association for Cryptologic Research, and the Software Definition Promotion Committee of Chinese Institute of Electronics are affiliated with ISCAS. The academic journals sponsored by the Institute include Journal of Software, Journal of Chinese Information Processing, Computer Systems & Applications, and International Journal of Software and Informatics.

Over the past 30 years since its establishment, especially since it entered the pilot project of knowledge innovation of Chinese Academy of Sciences, ISCAS has achieved fruitful results in the field of computer science and software, and won 49 achievements at or above the academy, provincial and ministerial level (only the first completing organization is counted), including 1 first prize, 2 second prizes and 1 third prize of the National Natural Science Award; 9 second prizes and 2 third prizes of the National Science and Technology Progress Award. It is particularly worth mentioning that the first National Natural Science Award in the field of computer science came from the Institute of Software.

The 12th meeting of the OpenChain Korea Work Group took place on December 20th and was absolutely packed with presentations and discussions. Check out the recordings below.

The OpenChain Project and the OpenChain ISO/IEC 5230:2020 international standard had an exceptional 2021. From conformance announcements to new members, it was clear that the market was ready to gather around a shared solution for effective, efficient use of open source in supply chains.

The question is “what next?”

The answer is “a lot.”

We have three new governing board members to announce, new certifiers, new partners, new conformant organizations and – perhaps most important for the long-term – deeper engagement on the policy level across multiple countries.

As a member of our community you can expect to continue receiving support from global and national work groups, ever improving material to help with the adoption and use of OpenChain ISO/IEC 5230:2020, and to be kept up-to-date on everything important in the compliance sphere via our webinars.

From a strategic perspective we are executing on the vision shared at the beginning of 2021: to scale engagement from thousands to tens of thousands of companies. With recent developments regarding open source, security and supply chain management the necessity of this is ever more clear.

There are three things to watch for in Q1 2022:

• The new board member announcements and their implications for geographies and sectors,
• Updated materials for suppliers to make OpenChain ISO/IEC 5230:2020 even easier,
• Announcements regarding how we will work even more closely with others in the compliance and security domain.

Thank you for all your support in 2021. I look forward to collaborating with you to make 2022 another milestone in our field.

As we head into the holiday season I wanted to take a moment and thank everyone for an exceptional year. The OpenChain Project has accomplished incredible things, from altering the status quo in the tooling landscape (and making it better) through to preparing our first online training course. Too many people to count assisted in this process. However, I wanted to give special thanks and acknowledgement to Mark Gisi, chairperson of the Specification Work Group. This year he lead an effort to conclusively bridge the gap between OpenChain ISO/IEC 5230 and the security domain. 

This work was far more than speculative: companies around the world began using our ISO/IEC standard to accomplish security goals, especially in light of recent international developments. The situation was both supported and challenged by the market reality of deployment before full community cohesion. For large companies this is never a serious concern, but for small companies trying to get up-to-speed it is our job (and our pleasure) to make sure they can match their peers, their suppliers and their customers as soon as possible.

Mark took this all in his stride and coordinated a multi-month effort with exceptional consensus to produce our Security Assurance Reference Guide in August. Since that date the guide has been available to all parties for review, and Mark further shepherded feedback from that review to determine if updates were needed in the near term. They were not, because you all hit it out of the ballpark, and we got this artifact to market at precisely the right time to address topics like the US Executive Order.

Mark, thank you.

Now, Mark is far from the only person who has done exceptional things. I want to particularly thank Balakrishna for shepherding our first online training course (with certification) through reviews by many, many parties. We go live on the 16th December, tomorrow, and change the market in that direction. The course, of course, is free. I also want to thank Oliver, who has been running the OpenChain Reference Tooling Work Group on a breathtaking schedule of bi-weekly meetings. The sheer amount of information collected and experience shared eclipses anything done before in that domain. And finally in this list (but not in terms of amazing contribution), I want to thank Max for running the OpenChain Automation Case Study, which took all the ingredients around the world, and showed how to make them turnkey, how to many them work in the supply chain, and how to contextualize it as business intelligence.

Shane Coughlan
OpenChain General Manager

The Open Compliance Summit had an excellent collection of speakers and participants for 2021. Continuing our tradition of recognizing some of the work done throughout the previous 12 months, we announced the following awards. Everyone here has contributed to making open source compliance faster, easier and more effective, and they have done a lot to make sure great compliance is available for every company of any size around the world.

We also awarded David Marr (Qualcomm) with a special award to recognize his exceptional and transformative contribution to our field. Thank you Dave. Without you, we would never have created OpenChain ISO/IEC 5230 and we would never have built this amazing community.

Watch The Awards

Lifetime Achievement

David Marr

National Champion

• Kris Feng
• Gao Kun
• Sami Atabani

Exceptional Contributor

• Balakrishna Mukundaraj
• Ayumi Watanabe
• Gary O’Neall
• Maximilian Huber

Community Driver

• Hiroyuki Fukuchi
• Kiyoshi Owada
• Andrew Katz
• Haksung Jang
• Oliver Fendt

The Steady Hand

• David Rudin
• Kate Stewart
• Michael Dolan
• Masato Endo
• Marcel Kurzmann

The New Guard

• Helio Chissini de Castro
• Jimmy Ahlberg
• Prasad Iyer
• Jari Koivisto
• Soim Kim
• Mary Mattran

The OpenChain Education Work Group and LF Training have collaborated on Introduction to Open Source License Compliance Management (LFC193), a free course with individual certification is now available.

Who Is It For

This course is intended for developers, project managers and executive decision makers who already know the basics of what open source software is and how copyrights work and are ready to take the next step towards building a formal compliance program for their organization.

What You’ll Learn

This course provides a reference example of how an open source compliance program should be structured. It is designed to be used in the context of OpenChain ISO/IEC 5230:2020 but can be used for any open source compliance program. The course provides knowledge from the basics of intellectual property through to key concepts of an open source review. It is based on real-world experience and focuses on outcomes that are directly applicable to product and service deployment. The outcome of this course will be a clear understanding of how to use compliance as business optimization, reducing resource use and increasing efficiency.

What It Prepares You For

This course enables you to deal with the basics of open source license compliance management. You will be able to assess the current status of your company and begin planning improvements to processes. If you are a project manager, engineer or management personnel with a responsibility for architecture and strategy, this course will be particularly useful.

Get Started Here

• https://training.linuxfoundation.org/training/introduction-to-open-source-license-compliance-management-lfc193/

Huge kudos to Balakrishna and everyone else in the Education Work Team for making this happen 🙂

The first OpenChain PlayBook is now available. It focuses on showing how a medium size company can go from considering to using OpenChain ISO/IEC 5230:2020.

The OpenChain PlayBooks are intended to help you understand the types of decisions made by managers in companies adopting OpenChain ISO/IEC 5230:2020. We cover examples of the decision-process in small, medium and large companies. Our examples are based on companies (a) in the technology industry, (b) in the middle of the supply chain and (c) shipping physical products containing software.

This may sound specific. However, the intention is to provide a thinking-tool for your company. Whether you are in the technology, finance, cloud, infrastructure or automotive industry (or any other), you will face similar challenges and solutions. The same applies whether you are in the middle of the supply chain or at its end, and whether you are shipping hardware or software. Our chosen examples cover a lot of ground.

Finally, this PlayBook contains an appendix with all the questions you need to answer to become OpenChain ISO/IEC 5230:2020 conformant. If you can answer all of these questions with “yes,” you have a conformant program. If you answer some of the questions with “no,” you know where to invest resources.

Get The Medium Company PlayBook

• https://github.com/OpenChain-Project/Reference-Material/blob/master/PlayBooks/Official/Version-1/Medium-Company/en/OpenChain%20PlayBook%20-%20Medium%20Company.pdf

There may be situations where you would like more examples for more specific industries. This is where the OpenChain community comes in. You can join our mailing lists, our webinars, our group calls and our regional work groups to discuss challenges with your peers and in your native language.

You can get started here:

• https://www.openchainproject.org/community